{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d3c6df45-d915-5645-99cf-080180ac97e4",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.0.16-tuxcare.7",
      "purl": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:ee62e9d7-6bbe-5693-8558-1a40733a2d5c",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c9be3c9-dac6-59f7-bf41-45d4502e5395",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30314254-8477-58df-95cd-392781dfef1f",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c92310ce-eea8-5e47-bc44-030cd6ee9113",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fdf51e9-01a0-540d-8136-316f43d96e8d",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86b25c12-ab51-53a9-b01a-b561d46d9cb5",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:444fea6a-ac6a-545b-95f1-bdbfd6813064",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a556ecd4-95e9-512c-8947-90c01490c73c",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e009734d-4687-55db-89ff-322a1de2881a",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:719938a6-ce1d-5b8a-a3a3-fb3288a1cace",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10e0b399-1815-5ccd-bf2b-eb3dbf9b358a",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4286b99f-d155-5874-b9b6-e3d4654a963c",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3731f13f-be56-5b91-82c6-2e099ca4e247",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5998141-fe01-5f8b-bc50-a7e79a6aef76",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:258bb8b1-1f2b-5e13-8892-d2947e82f2a4",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d8e78fc-898d-55ce-9aaa-02018da88524",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e7925c4-2099-55d9-ba04-11ca2bf7b4ab",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50b4f111-f097-546e-9b5c-35ebb357a874",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:143d669a-552e-551f-8ac2-ced8e9e2d699",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f0e98ab-0eb6-5d65-8aa7-1440895fe965",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:490ad244-d51b-55b7-a7cf-864f0ac2bd37",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f06f4ccb-f9ea-57af-b916-f11df8c49078",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ad8e393-6eae-5f9f-978a-337da28251d3",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3e555e1-ae62-5d17-af87-0c37af8a0fc9",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af2e4122-28c2-514c-a006-0d9fbd910e40",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a672d99-5b10-56e3-bd6b-8717c3814a07",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24f74efc-0af8-5ee2-8c3b-431141964b06",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:192b22e3-1ff2-529d-aff0-3d084f5ef02a",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afb6a64a-82a8-546f-bbf3-ae30b0ff7c48",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf89a7d4-7e8d-573e-8185-8d59659b84ab",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6ac4109-c462-5799-9d6f-d68575365215",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85f11e76-2f99-569e-a1e2-7ed9a58d5f42",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a35ad7c-4288-58bb-98a3-b6eb6461eea1",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ecb6e00-f2ba-5b0f-92d8-6ecc2524b84c",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfa963bd-6859-524f-94ad-ec95c35624f1",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4511bcf9-4f18-52d1-a2ab-33a8e9338afb",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:631122e2-35b8-5ad4-b1e0-8ac37345704e",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:903b97ac-73a6-5de6-a004-6ba1b65c4b38",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4f6f29e-b646-5fb6-a3ec-da0bde58fc1f",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32a34e2f-acc6-5434-830d-e01ff6873a78",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e53c21c-5ec1-5e84-a2c3-f7aa8de19470",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1535401-f930-56a2-9b24-46c4617128cb",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67a891ca-09a7-5e04-b9ed-1aa82af6e86f",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dad6d5a1-822b-5b0d-a2bc-1138f8356035",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49a83853-b55c-5a47-be4a-a6c799f6d4d0",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d7bb83e-b6b8-5474-9faa-ada495678c01",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.7"
    }
  ]
}